Read Time:1 Second
Post Content
Category Archives: Advisories
GLSA 202405-29: Node.js: Multiple Vulnerabilities
GLSA 202405-28: NVIDIA Drivers: Multiple Vulnerabilities
DSA-5683-1 chromium – security update
Read Time:9 Second
Security issues were discovered in Chromium, which could result
in the execution of arbitrary code, denial of service or information
disclosure.
DSA-5685-1 wordpress – security update
Read Time:31 Second
Several security vulnerabilities have been discovered in WordPress, a popular
content management framework, which may lead to exposure of sensitive
information to an unauthorized actor in WordPress or allowing unauthenticated
attackers to discern the email addresses of users who have published public
posts on an affected website via an Oracle style attack.
Furthermore this update resolves a possible cross-site-scripting vulnerability,
a PHP File Upload bypass via the plugin installer and a possible remote code
execution vulnerability which requires an attacker to control all the
properties of a deserialized object though.
mingw-glib2-2.78.5-1.fc39
Read Time:7 Second
FEDORA-2024-be032e564d
Packages in this update:
mingw-glib2-2.78.5-1.fc39
Update description:
Update glib2 to fix CVE-2024-34397.
mingw-glib2-2.80.1-1.fc40
Read Time:7 Second
FEDORA-2024-2ce1c754f7
Packages in this update:
mingw-glib2-2.80.1-1.fc40
Update description:
Update glib2 to fix CVE-2024-34397.
glib2-2.78.5-1.fc39
Read Time:14 Second
FEDORA-2024-775b385d13
Packages in this update:
glib2-2.78.5-1.fc39
Update description:
Resolve CVE-2024-34397 (GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing), and also update gnome-shell to ensure this fix does not break the screencast feature.
glib2-2.80.1-1.fc40
Read Time:14 Second
FEDORA-2024-731f6da9a5
Packages in this update:
glib2-2.80.1-1.fc40
Update description:
Resolve CVE-2024-34397 (GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing), and also update gnome-shell to ensure this fix does not break the screencast feature.
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
Read Time:26 Second
Multiple vulnerabilities have been discovered in Google Chrome, which could allow for arbitrary code execution. Successful exploitation of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.